It's surprising to me how pervasive this idea is that app code can be completely trusted because a developer signs it at some point. All those super secure end

It's surprising to me how pervasive this idea is that app code can be completely trusted because a developer signs it at some point. All those super secure end-to-end encrypted messaging apps are just one automatic app update away from uploading any locally stored conversations and keys. And turning off automatic updates isn't enough, Google and Apple have ways to force an update if required. Maybe for now Apple/Google can convince the courts to not coerce them into using this power, but it is present.